Resubmissions

03-08-2023 06:02

230803-grqf6ach2t 1

03-08-2023 05:55

230803-gmnf1acg8t 1

Analysis

  • max time kernel
    573s
  • max time network
    362s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    03-08-2023 06:02

General

  • Target

    EA Trend Hunter EA v.8 Manual.pdf

  • Size

    1.3MB

  • MD5

    48b148822335c2a2bf9b3d6b13e68233

  • SHA1

    b38207f410acb6281b9fbd5e3f4033b75f4b5955

  • SHA256

    17c510485c351bc0c336d9f6489df6f6f2ebc3554acf9875095393f16d85459f

  • SHA512

    46c24b1db7f9769a2dc66d9a81f2e30e3e1c982529b1ab8cd03a53f86f8c6ef92d4a9c607f451c41db8000f9e8fc68dd782cdb29fa082a4a67f0691fb24f828e

  • SSDEEP

    24576:qnQtQ4FPv16SCyFqDneONSjx6HtBGa1wthdd0y8R16wJEp7B3DvxOvIFi/i:EQR1v4HTeONSjx6NHyrdERQ88tLgQFia

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EA Trend Hunter EA v.8 Manual.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8c7db00575cb880e491e50ca5f716137

    SHA1

    2397ba46cb8eb1326c0fb457cab06a6e6b5c40d4

    SHA256

    03147e24dfcf294167f85b217f1580c4674f881b228d3177006a7444791fce3b

    SHA512

    f84953758378cc8dae4a8f76baea487249e9dad96ee782c7d742f2d52ed88e03466067ee8fbae4ff829f55a5e28c6e94cec4c00e742914681f01b5b4d7c7b2b0